7c928f9ac9954e3ed0558eb348675d66 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

7c928f9ac9954e3ed0558eb348675d66
Size

120KB
MD5

7c928f9ac9954e3ed0558eb348675d66
SHA1

7d517d5176df5a2cc1a3d5e97ccff55ac9f69efc
SHA256

080fcd835067656301aa945a13ec25a5d5c151815b7f658f527f1937455f6b6b
SHA512

3e32886ab20eefdaadd47ac097921f6f65af8de07a0819ec45d0ea91554895b7e8eda09505be409069a9be8657a4495e5aafce200b3cd726113c9aea6b95c26e
SSDEEP

3072:qvKef2XTT4s9zwUl1ght3Idu9ATrcAa9o:3efkBfHat3wjTa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7c928f9ac9954e3ed0558eb348675d66

Files

7c928f9ac9954e3ed0558eb348675d66
.exe windows:4 windows x86 arch:x86

e4e848b4d16617b632860e662e459c05

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalFree
ReleaseMutex
DeviceIoControl
CreateFileA
lstrcmpA
lstrcpyA
OpenMutexA
lstrlenA
GlobalAlloc
GetModuleHandleA
GetStartupInfoA
GetEnvironmentStrings
GetCommandLineA
GetVersion
RegisterServiceProcess
CloseHandle
UnhandledExceptionFilter
GetModuleFileNameA
GetACP
GetOEMCP
GetCPInfo
ord122
GetFileType
VirtualFree
VirtualAlloc
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetLastError
CreateMutexA
ExitProcess
RtlUnwind
GetStdHandle

user32

MessageBoxA
KillTimer
SetTimer
PostQuitMessage
DefWindowProcA
RegisterClassA
CreateWindowExA
GetMessageA
TranslateMessage
DispatchMessageA

advapi32

RegOpenKeyA
RegQueryValueExA
RegCloseKey

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ